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IN THE CLAIMS: 

This listing of claims will replace all prior versions and listings of claims in the 
application. 

1 . (Currently amended) A system comprising: 
a blade device; and 

chassis management logic, the chassis management logic to determine whether one or 
more capabilities associated with the blade device match a capability policy; 

the chassis management logic further to isolate the blade device from a computing 
domain responsive to determining that the blade device capabilities do not match the 
capability policy; and 

a central repository, couple to the chassis management logic, to hold a plura lity of public 
kev values, each of the public kev values corresponding to one of a plurality of blade devices. 

2. (original) The system of claim 1 , further comprising: 

a data communication pathway coupled to the blade device and to the chassis 
management logic. 

3. (cancel) The system of claim 1, wh e rein: 

the chassis managem e nt logic is further to isolate the blade device from a computing 
domain responsive to determining that the blado device capabilities do not match the 
capability policy. 
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4. (currently amended) The system of claim [[ 1 ]]2, further comprising: 
a plurality of blade devices; 

wherein each of the plurality of blade devices is coupled to the data communication 
pathway; and 

wherein the chassis management logic is further to determine, for at least one of the 
plurality of blade devices, whether blade capabilities associated with the at least one blade 
device match the capability policy. 

5 . (original) The system of claim 4, wherein: 

the chassis management logic is further to isolate from the computing domain any of the 
plurality of blade devices whose associated capabilities do not match the capability policy. 

6. (original) The system of claim 1, wherein: 

the chassis management logic is further to determine whether the blade device is trusted. 

7. (original) The system of claim 1 , further comprising: 

a baseboard memory controller, wherein the baseboard memory controller is to control 
communication between the blade device and the chassis management logic. 



8. (original) The system of claim 1, wherein: 

the blade device includes logic to perform boot processing. 
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9. (original) The system of claim 8, wherein: 

the chassis management logic is further to generate a failure indicator value responsive to 
determining that the blade device capabilities do not match the capability policy; and 

the blade device is to, responsive to the failure indicator value, terminate the boot 
processing. 

1 0. (original) The system of claim 1 , further comprising: 
a chassis to receive the blade device. 

1 1 . (Previously presented) A method comprising: 

determining if one or more capabilities associated with a blade device match a capability 
policy; 

if the blade device capabilities do not match the capability policy, isolating the blade 
device from a computing domain; and 

maintaining in a central repository a plurality of public key values, each of the public key 
values corresponding to one of a plurality of blade devices. 

12. (Previously presented) A method comprising: 

determining if one or more capabilities associated with a blade device match a capability 
policy; 

if the blade device capabilities do not match the capability policy, isolating the blade 
device from a computing domain; 
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challenging the blade device to provide a response; and 

if the blade device does not provide the response, isolating the blade device from the 
computing domain; 

wherein the challenging further comprises: 

encrypting a challenge value using a public key value; and 
providing the encrypted challenge value to the blade device. 

13. (original) The method of claim 11, wherein determining further comprises: 
accessing a capability record associated with the blade. 

1 4. (original) The method of claim 1 1 , further comprising: 

maintaining in a central repository a plurality of capability records, each capability record 
being associated with one of a plurality of blade devices. 

15. (canceled) 

16. (canceled) 

17. (Previously presented) An article comprising: 

a machine-readable storage medium having a plurality of machine accessible instructions, 
which if executed by a machine, cause the machine to perform operations comprising: 
registering one or more capabilities with a central repository; 
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determining if one or more capabilities associated with a blade device match a 
capability policy; 

if the blade device capabilities do not match the capability policy, isolating the blade 
device from a computing domain; and 

maintaining in a central repository a plurality of public key values, each of the public 
key values corresponding to one of a plurality of blade devices. 

1 8. (Previously presented) An article comprising: 

a plurality of machine accessible instructions, which if executed by a machine, cause the 
machine to perform operations comprising: 

registering one or more capabilities with a central repository; 
determining if one or more capabilities associated with a blade device match a 
capability policy; and 

if the blade device capabilities do not match the capability policy, isolating the blade 
device from a computing domain; 

challenging the blade device to provide a response; and 

if the blade device does not provide the response, isolating the blade device from the 
computing domain 

wherein challenging further comprises instructions that, when executed, cause the 
machine to: 

encrypt a challenge value using a public key value; and 
provide the encrypted challenge value to the blade device. 
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1 9. (original) The article of claim 1 7, wherein: 

the instructions that cause the machine to determine if one or more capabilities associated 
with a blade device match a capability policy further comprise instructions that cause the 
machine to access a capability record associated with the blade. 

20. (original) The article of claim 17, further comprising: 

a plurality of machine accessible instructions, which if executed by a machine, cause 
the machine to perform operations comprising: 

maintaining in a central repository a plurality of capability records, each 
capability record being associated with one of a plurality of blade devices. 



21. (canceled) 



22. (canceled) 



23. (withdrawn) A method comprising: 

registering one or more capabilities with a central repository; 

determining if a capability authorization has been received within a pre-defined timeout 
interval; 

if the capability authorization has been received within the timeout interval, performing 
boot processing; and 
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if the capability authorization has not been received within the timeout interval, declining 
to perform the boot processing. 

24. (withdrawn) The method of claim 23, further comprising: 
providing a response to a challenge; 

proceeding, if the response is correct, with boot processing; and 
if the response is not correct, isolating from a computing domain. 

25. (withdrawn) The method of claim 24, wherein: 

providing a response further comprises decrypting a challenge value using a private key. 

26. (withdrawn) The method of claim 23, wherein: 

declining to perform the boot processing further comprise performing stand-alone boot 
processing. 

27. (withdrawn) The method of claim 23, wherein: 

declining to perform the boot processing further comprises powering down. 



28. (withdrawn) An article comprising: 

a machine-readable storage medium having a plurality of machine accessible instructions, 
which if executed by a machine, cause the machine to perform operations comprising: 
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registering one or more capabilities with a central repository; 
determining if a capability authorization has been received within a pre-defined 
timeout interval; 

if the capability authorization has been received within the timeout interval, 
performing boot processing; and 

if the capability authorization has not been received within the timeout interval, 
declining to perform the boot processing. 

29. (withdrawn) The article of claim 23, further comprising: 

a plurality of machine accessible instructions, which if executed by a machine, cause the 
machine to perform operations comprising: 
providing a response to a challenge; 

proceeding, if the response is correct, with boot processing; and 
if the response is not correct, isolating from a computing domain. 

30. (withdrawn) The article of claim 24, wherein: 

instructions that cause the machine to provide a response further comprise instructions 
that cause the machine to decrypt a challenge value using a private key. 

3 1 . (withdrawn) The article of claim 23 , wherein: 

instructions that cause the computer to decline to perform the boot processing further 
comprise instructions that cause the machine to perform stand-alone boot processing. 
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32. (withdrawn) The article of claim 23, wherein: 

instructions that cause the computer to decline to perform the boot processing further 
comprise instructions that cause the machine to power down. 

33. (previously presented) The system as recited in Claim 1 wherein 

the chassis management logic further comprises authentication logic to determine 
whether the blade device is to be authenticated before determining whether one or more 
capabilities associated with the blade device match the capability policy. 

34. (Previously presented) The system as recited in Claim 1 wherein 

the chassis management logic is to register the one or more capabilities associated with 
the blade device with a central repository, and determine whether the one or more registered 
capabilities associated with the blade device match the capability policy, resulting in a 
capability authorization; 

wherein the chassis management logic is to allow boot processing of the blade device if 
the capability authorization has been received during a predetermined timeout interval; and 

wherein the chassis management logic is further to disallow boot processing of the blade 
device if the capability authorization has not been received within the predetermined timeout 
interval. 



